CVE-2022-2047 @ Maven-org.eclipse.jetty:jetty-client-9.4.36.v20210114

[nitinp1]

Vulnerable Package issue exists @ Maven-org.eclipse.jetty:jetty-client-9.4.36.v20210114 in branch main

In Eclipse Jetty versions through 9.4.46, 10.0.x through 10.0.9, and 11.0.x through 11.0.9, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario.

Namespace: nitinp1
Repository: WebGoat
Repository Url: https://github.com/nitinp1/WebGoat
CxAST-Project: nitinp1/WebGoat
CxAST platform scan: 371cf28e-43c8-4e90-86fa-65d2f0911dc1
Branch: main
Application: WebGoat
Severity: LOW
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-20

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: NONE
Remediation Upgrade Recommendation: 9.4.47.v20220610

---

References
Advisory
Pull request
Commit
Issue